All Questions
Tagged with amazon-web-services eks
28 questions
-1
votes
1
answer
7
views
In kubernetes, I want to restrict my pod scheduling on worker node if memory utilisation of worker node goes above 50% of its capacity?
For eg: worker node(W) have 64GB of memory and 16vCPUs
resources assigned to a pod : cpu - 4 , memory- 8GB
Now only 4 pods can be scheduled on worker node(W).
How can i achieve this ?
Node affinity , ...
0
votes
1
answer
65
views
ingress failing due to error: path /?(.*) cannot be used with pathType Prefix
I'm trying to deploy this ingress service on AWS EKS. it works locally, but not when deployed to EKS.
apiVersion: networking.k8s.io/v1
kind: Ingress
metadata:
name: ingress-service
annotations:
...
0
votes
0
answers
18
views
EKS DR Strategy - How to control container activation in warm standby region
I have an EKS cluster with a warm standby in another AWS region for disaster recovery. Some of my containerized applications process data and forward it to other systems - I need to ensure these ...
0
votes
1
answer
59
views
why all my aws-node Pods in CrashLoopBackOff State in Kubernetes Cluster
I'm currently facing an issue with my Kubernetes cluster where all the aws-node pods in the kube-system namespace are in a CrashLoopBackOff state. Here are the details of my setup:
Kubernetes Version: ...
0
votes
0
answers
16
views
Building Infra on AWS using terraform for a multiaccount project
Building Infra on AWS using Terraform for a multiaccount project, where I need to build some eks, vpcs, rds, elastic cache and cross functional roles , I am roles and all other required components. ...
-1
votes
3
answers
220
views
I created an Amazon EKS Kubernetes cluster using Terraform, but now I do not have access to any of the resources, and kubectl fails due to credentials
This question seeks a solution for the following errors
If you create an EKS cluster using terraform, and then use the same credentials you used to create the cluster, but see these errors, then what ...
0
votes
0
answers
18
views
Can't create EKS Node group with Terraform
I created an EKS cluster first, then create node group with Terraform.
data "aws_region" "current" {}
data "aws_iam_policy_document" "eks_worker_node_assume_role&...
0
votes
0
answers
25
views
EKS- pod stuck in containerCreating state when attached to 2 claims with RWX accessmode and efs storage class
I have pod deployed in EKS which has 2 PVCs attached, below is yaml snipped for the same
- name: dev1-rwx-volume
persistentVolumeClaim:
claimName: dev1-rwx-volume-pvc
- name: dev2-rwx-...
0
votes
1
answer
186
views
Sealed Secrets got "error: cannot fetch certificate" in Amazon EKS cluster
I am using Amazon EKS.
I can list my services by
kubectl get services -n production-sealed-secrets
NAME TYPE CLUSTER-IP EXTERNAL-IP PORT(S) AGE
sealed-secrets ...
0
votes
0
answers
74
views
How to setup EKS ADOT for sending OpenTelemetry metrics to self managed prometheus?
I have tried to configure ADOT collector using below yaml file
apiVersion: apps/v1
kind: Deployment
metadata:
name: adot-collector
namespace: monitoring
spec:
replicas: 1
selector:
...
0
votes
0
answers
34
views
AWS application load balancer not registering targets for EKS node target group
I have an EKS cluster with public/private access on a VPC with public and private subnets. I've setup my ALB in the public subnets on port 80, internet-facing and ip and installed the AWS controller ...
0
votes
0
answers
163
views
`apiVersion` is set to `v1beta1`. Still getting 'no kind "ExecCredential" is registered for version "client.authentication.k8s.io/v1alpha1"'
Despite having explicitly set apiVersion: client.authentication.k8s.io/v1beta1, why the following error when running any kubectl command (f.e. kubectl version)?
Unable to connect to the server: ...
1
vote
1
answer
139
views
EKS cluster upgrade from 1.23 to 1.24 ServiceUnavailableException: Updates in the cell are disabled
I've tried upgrading my EKS cluster to 1.24 and I keep getting this error: ServiceUnavailableException: Updates in the cell are disabled
I get this using the AWS console webpage here https://us-east-1....
0
votes
1
answer
211
views
What happens when you are running a "too old" version of k8s in eks?
I'm desperately trying to resolve all of our dockershim uses so we can migrate to EKS 1.24+, but I'm not optimistic I'll get it done before the "deadline".
I'm stuck on EKS 1.23 until I can ...
1
vote
1
answer
3k
views
EKS - Get availability zone of pod deployment from pod
In my EKS cluster, I have a few node groups that cover availability zone A and B. The pods running on the nodes are consumers/producers on various Kafka topics (MSK). There isn't any internal ...
2
votes
1
answer
194
views
Does the AWS Admin user have the eks:AccessKubernetesApi permission?
I am logged in to AWS as the AWS Admin, with Administrator access.
How do I find out if this user has the eks:AccessKubernetesApi IAM permission?
1
vote
1
answer
1k
views
How to fix wrong /etc/resolv.conf in kubernetes pods after creating a cluster with EKS eksctl with vpc-cni plugin?
So, i've created a kubernetes cluster in EKS with eksctl, ClusterConfig:
apiVersion: eksctl.io/v1alpha5
kind: ClusterConfig
metadata:
name: exchange-develop
region: us-east-1
version: '1.19'
...
0
votes
1
answer
467
views
How many nodes can I have in single EKS cluster?
I have an EKS cluster and today my subnet had 0 Available IPv4 addresses.
Does that mean that there are limits per nodes within 1 cluster in EKS?
2
votes
1
answer
84
views
Should we deploy Storage Class Per Application OR one Storage Class for All applications?
I am using aws-ebs-csi-driver on k8s for persistent volumes. I came across a scenario where I can create ebs storage class once and then use it across all the statefulsets deployments to create ...
1
vote
1
answer
1k
views
Installing NVIDIA driver on EKS nodes
I have a EKS cluster that has two node pools. One CPU general compute, the other one has GPU support (g4dn). I want to install NVIDIA driver on to the GPU node group. The best I can do right now is to ...
0
votes
1
answer
63
views
EKS NodeAffinity for Services
https://www.eksworkshop.com/beginner/140_assigning_pods/affinity/
Links like above usually show node affinity for "kind: Pod".
Isn't it possible to use node affinity for "kind: Service&...
5
votes
3
answers
7k
views
Is AWS Fargate suitable for web applications?
I'm making a web-app, I've tried both ECS and EKS at AWS. It's been very comfortable to use Fargate instances instead of EC2. But I'm not sure I understand how to use them since when I count at it, it'...
1
vote
1
answer
2k
views
How to Integrate Amazon API Gateway with EKS using Application Load Balancer (ALB)?
According to the AWS documentation, it is possible to integrate Amazon API Gateway with EKS using ALB. However, by far most of this documentation explains how to do this with NLB instead of ALB. So ...
1
vote
1
answer
819
views
What does "eksctl create iamserviceaccount" do under the hood on an EKS cluster?
AWS supports IAM Roles for Service Accounts (IRSA) that allows cluster operators to map AWS IAM Roles to Kubernetes Service Accounts.
To do so, one has to create an iamserviceaccount in an EKS cluster:...
1
vote
1
answer
324
views
Is it possible to have an aws EKS infrastructure as code?
Is it possible to declare "a complete production level EKS with other aws services" using terraform? I know that terraform has an eks module and an aws provider. But I'm not sure if one can ...
1
vote
1
answer
203
views
In k8s, do the controller nodes have to be in same VPC as the worker nodes for a cluster?
I'm new to k8s and trying to grasp the infrastructure concepts, and trying to apply them in AWS. I know a k8s cluster has a control plane, which has the management nodes, and a data plane, which has ...
1
vote
2
answers
561
views
Spread pods over cluster
Current using AWS's auto-scale policy to start EKS worker nodes (min+desired 10, max 15) on a fixed time every day. There are 120 pods and 30 deployments.
Obviously, only one node will be up firstly. ...
0
votes
2
answers
105
views
EKS - created cluster from console with federated IAM admin - how to access
I have no programmatic access for the user who created the cluster only graphical.
I tried a lot of things and I always get access denied on kubectl as I have to use another IAM identity that has ...